New malware infects over 36.5 million Android devices to generate fraudulent ad revenue

[Jos]

Up to 36.5 million Android devices may have been infected with a newly discovered piece of malware that generated fraudulent ad revenue for its creators. The malicious code was spotted in in 41 apps developed by a Korean company named Kiniwini and registered on Google Play as ENISTUDIO Corp., which produces a series of casual cooking and fashion games under the “Judy” brand.

According to CheckPoint Security, most of these apps have been on the Play Store for a long time but they were all recently updated so it’s unclear as to when the malicious code was added.

In order to circumvent Google Play’s Protection, the hackers only downloaded the actual malicious payload after the app had been installed by connecting to a C&C server (Command and Control). This includes JavaScript code, a user-agent string and URLs controlled by the malware authors. Once a connection is established, the malware opens said URLs in the background and starts generating clicks.

Although this is potentially the most widely-spread malware yet found on Google Play, it isn’t the first nor the most damaging. CheckPoint says it did not find any evidence of compromised user data.

Google has removed the apps after being notified by CheckPoint but you can find the complete list of the affected apps here, and of course, if any of them are on your phone you should uninstall right away.

Permalink to story.

https://www.techspot.com/news/69494-new-malware-infects-over-365-million-android-users.html

 

[VitalyT]

Characters straight from Gangnam song. Something is wrong with Koreans these days.

 

[bexwhitt]

Techspot fails at basic maths and assumes that the affected apps are all downloaded on one per device.

 

[Uncle Al]

While I am in favor of public execution for hackers, I'm a little less harsh on those that engage in this sort of thing; so lets do something much more humain such as remove their thumbs and index fingers ..... that will slow their skills for awhile and let them ponder what their professional futures will be when caught again and the remainder of their digits are removed ...... Still too harsh???

 

[VitalyT]

While I am in favor of public execution for hackers, I'm a little less harsh on those that engage in this sort of thing; so lets do something much more humain such as remove their thumbs and index fingers ..... that will slow their skills for awhile and let them ponder what their professional futures will be when caught again and the remainder of their digits are removed ...... Still too harsh???

That mini saw from the last news now seems even more practical...

 

[Raoul Duke]

Techspot fails at basic maths and assumes that the affected apps are all downloaded on one per device.

well it does say "up to" and "may have been", I call them weasel words since they are weaseling out of making a more definitive statement. Like the ads, save up to 50%. Virtually meaningless, is almost everything in the store 50% off, or is it a 'loss leader' that they had 2 items in stock and the rest of the store is like 1% off. You can't tell.

 

[Skidmarksdeluxe]

While I am in favor of public execution for hackers, I'm a little less harsh on those that engage in this sort of thing; so lets do something much more humain such as remove their thumbs and index fingers ..... that will slow their skills for awhile and let them ponder what their professional futures will be when caught again and the remainder of their digits are removed ...... Still too harsh???

Too lenient.

 

[Uncle Al]

Too lenient.

Yeah, I suppose I'm getting soft in my old age .......

 

[bexwhitt]

well it does say "up to" and "may have been", I call them weasel words since they are weaseling out of making a more definitive statement. Like the ads, save up to 50%. Virtually meaningless, is almost everything in the store 50% off, or is it a 'loss leader' that they had 2 items in stock and the rest of the store is like 1% off. You can't tell.

It says "over" in the title, and if that's true D Trump is the best President EVER.

 

[Skidmarksdeluxe]

Yeah, I suppose I'm getting soft in my old age .......

Actually the opposite is usually true. The older one gets, the more cynical and less tolerant they become of most things... well in my experience anyway.